Added Access-Control-Allow-Origin: *

Added CORS header to enable communication with other domains.
Given the limit on GET /store this is the last piece to enable a JavaScript only application to use OpenKeyval